Server connecting to outside host

  • Thread starter Thread starter Leo
  • Start date Start date
L

Leo

I have no idea why my server is connecting to a server
belonging to a company in germany called s-t-c.net. I can
see it on the Firewall mapping that it constantly connects
to that server. Could it be doing that to update any DNS
records or should I be concerned? it's using a port at
over 8000 (something like 8242). Nothing can come in
through that port though. It's closed at the firewall
level.
 
Netstat -an [see example below] or better yet fport may help you determine what
application/service is involved with that connection on your end as the source port.
It could be a trojan/parasite on your computer causing the traffic. I would run
virus/trojan scan and something like AdAware to check for parasites such as
spyware/adware. I don't think it would be dns and if it was port 53 tcp/udp would be
involved. --- Steve

Source Destination
TCP 192.168.1.65:1075 192.168.1.105:3389 ESTABLISHED
TCP 192.168.1.65:1108 204.127.204.17:119 ESTABLISHED

http://www.lavasoftusa.com/software/adaware/
http://packetstormsecurity.nl/filedesc/fport.zip.html
 
Back
Top